Title
#file-carving
j

joe_antony1

02/17/2020, 2:44 PM
which open source fleet management tool support file carving ??
CptOfEvilMinions

CptOfEvilMinions

02/17/2020, 4:54 PM
https://github.com/osquery/osquery/issues/3797 this Github PR shows that Zentral might have the capability
j

joe_antony1

02/17/2020, 4:56 PM
thanks
CptOfEvilMinions

CptOfEvilMinions

02/17/2020, 4:56 PM
https://www.metalliccode.com/carving/ This blog post shows two flags
--carver_start_endpoint=/start_upload
(Where is the endpoint to tell the server we’re starting a carve) and
--carver_continue_endpoint=/upload_blocks
(Where is the endpoint to give the server a block of data). You could build a simple Python flask app to handle receive files as well
j

joe_antony1

02/17/2020, 4:58 PM
ok
javuto

javuto

02/18/2020, 5:59 AM
6:00 AM
osctrl does support file carving!
🎉 2
j

joe_antony1

02/18/2020, 9:11 AM
noted & thanks
e

ec4

02/18/2020, 12:52 PM
And SGT